Security & Compliance Lead

The role

The Security & Compliance Lead will build and lead the security program by embedding security into engineering practices. This role involves managing risk, regulatory compliance, and application and cloud security.

What you will do

• Set the foundations of a lean, effective security function integrated with Engineering
• Establish security practices across application development, cloud infrastructure, IAM, CI/CD, and data protection
• Identify and assess architectural risks, drive threat modeling, and oversee remediation
• Build the process to detect, prioritize, and patch vulnerabilities continuously
• Establish incident detection, escalation, and response processes
• Assess security risks specific to LLM-based applications
• Drive risk assessments, recommend mitigations, and establish risk ownership and acceptance processes
• Own ISO 27001, GDPR, and related security compliance
• Support teams in meeting the security and compliance requirements of customers

Required qualifications

• 5+ years in information security
• Hands-on experience in security engineering, cloud security, or application security
• Exposure to governance and compliance
• Experience building or scaling security programs in high-growth SaaS or cloud-native product companies
• Solid understanding of modern cloud architectures, secure software development practices, and vulnerability management
• Experience with ISO 27001 certifications or audits
• Solid knowledge of GDPR
• Ability to make pragmatic risk trade-offs and influence engineering teams
• Fluent in English

Nice to have

• Familiarity with the security risks of LLM-based applications
• Italian

Benefits

• Hybrid Work
• Health Insurance
• Meal Vouchers
• Team Retreats & Off-sites

About the company

Lexroom is building the AI platform where legal work gets done. The company has grown to €25M ARR and is used by more than 20,000 legal professionals across Italy, Spain, Germany, France, and Bulgaria.